
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json)
Hash identifier: Z24XyspCxiQ7bDD3m2TRTyOv5bAeFTwcdmbtGnvBLcQ=
Subject key identifier: AC:C6:C5:6A:50:86:CB:E2:F9:DE:7D:EE:7F:D7:8C:AD:E8:51:5C:40
Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Certificate serial: 0366
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
Manifest number: 0360
Signing time: Sun 05 Apr 2026 00:40:16 +0000
Manifest this update: Sun 05 Apr 2026 00:40:16 +0000
Manifest next update: Sun 12 Apr 2026 00:40:16 +0000
Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: 1oikKA8nsI1Y7C1jeCB5gkEQtCxNugcNJ+DAnyOHrEI=)
2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: isEssEWm0725iSvQv15Srmh7ru8PYttLm9Qb+FYEb6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38
Validity
Not Before: Apr 5 00:40:16 2026 GMT
Not After : Apr 12 00:40:16 2026 GMT
Subject: CN=69d1af70-64cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:51:58:e4:79:6b:91:cc:f9:2a:c7:b3:58:
06:9b:26:67:69:b8:53:54:32:2f:52:d7:fe:4c:7b:
1a:3f:df:59:97:99:01:7f:64:50:aa:94:2b:b1:e2:
cb:27:92:00:ba:6c:15:28:53:99:d6:86:c3:3e:5c:
6d:e4:a4:a3:31:53:72:fa:9c:75:70:cb:d5:5c:92:
78:9c:51:2f:2a:a4:dc:21:33:d7:04:93:f9:9e:6e:
f9:32:06:9a:c0:14:8d:3c:61:60:75:5a:5c:6c:22:
d2:6c:7b:59:17:13:e1:9b:ad:e7:51:97:a5:1f:06:
bd:91:72:5d:b6:f5:ae:3f:9a:02:ae:b8:34:14:7b:
7a:c4:1e:a8:33:bb:cd:7c:e4:05:58:8f:74:bc:e7:
09:df:9a:0f:13:fa:c5:f6:72:2e:ff:20:6f:e3:72:
23:7d:93:48:52:96:8c:10:e6:f7:dd:5a:04:bc:ed:
e1:35:51:03:4c:45:1c:8f:64:24:0d:b2:8e:03:70:
2a:92:a4:1a:8c:5a:6b:1c:03:85:7f:ff:39:5d:6d:
1a:bc:c5:20:56:1a:2f:ab:6c:2b:a8:6f:f9:26:40:
36:1f:ff:e3:b8:8d:16:fa:0c:a8:a9:10:dc:1c:31:
91:57:80:be:80:63:f9:50:9d:92:bf:9e:37:64:b8:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:C5:6A:50:86:CB:E2:F9:DE:7D:EE:7F:D7:8C:AD:E8:51:5C:40
X509v3 Authority Key Identifier:
keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:53:31:bb:e2:ed:f9:e0:56:8b:80:f5:ac:a7:86:b8:0b:ce:
22:b8:0f:4c:4c:29:2c:1a:c4:ef:05:0b:80:75:58:f1:7e:a3:
50:24:58:54:aa:0b:79:d6:31:c7:f8:9e:fd:35:10:6c:67:87:
d7:0d:fc:43:8f:75:21:8d:9e:48:97:b7:cf:e0:1c:87:31:40:
2c:d6:e3:27:dd:49:2f:e6:73:6d:c4:ca:44:f0:d1:10:92:6a:
23:2f:df:80:e6:db:89:ba:c3:af:cf:31:e1:b7:bb:0b:bb:60:
dd:88:cb:64:9e:b2:a9:41:17:aa:d9:60:6b:6f:4a:5c:36:54:
ef:e8:e1:0c:e8:88:90:43:1e:08:3f:c9:90:d0:9d:6d:14:d1:
d4:94:2c:e5:ac:f2:3e:d5:d6:e0:10:9e:38:f0:57:d8:42:f0:
9b:7b:53:70:bf:ca:f1:24:bc:52:17:8a:d9:0f:0b:58:ba:f1:
44:ed:7a:53:b1:f4:e4:0c:76:4f:12:d4:b6:17:05:ac:37:91:
96:e7:ba:0e:ef:2b:38:36:75:1c:07:d7:b1:8a:09:86:9a:8a:
05:34:7d:87:0e:fd:32:13:07:fa:72:c4:a1:27:7b:fc:c0:a4:
5f:7b:30:6b:09:e4:b5:90:7c:80:ca:a0:a6:68:9e:29:ef:fd:
f0:06:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:45:53 2026 by rpki-client